EasyManuals Logo

Oracle Secure Backup User Manual

Default Icon
174 pages
To Next Page IconTo Next Page
To Next Page IconTo Next Page
To Previous Page IconTo Previous Page
To Previous Page IconTo Previous Page
Page #129 background imageLoading...
Page #129 background image
Configuring Security for the Administrative Domain
Managing Security for Backup Networks 6-19
You can set the key size in the obparameters file when you install Oracle Secure
Backup on the administrative server. When you install Oracle Secure Backup
interactively, the install script gives you an opportunity to modify the obparameters
file.
To set the key size in obparameters when installing interactively:
1. Before running the install script on the administrative server, or when the install
script prompts you to modify obparameters, open the file in a text editor.
2. Search for the following string: certificate key size. Set the key size to the
desired default value. The following example sets the default key size to 2048 bits:
identity certificate key size: 2048
3. Save and close the file after making any other changes to obparameters.
4. Proceed with the installation.
Oracle Secure Backup uses the key size in obparameters to set the initial value for
the certkeysize security policy. This security policy specifies the default security
key size for hosts in the domain. You can change or override this default when
configuring an individual host.
Setting the Key Size in the certkeysize Security Policy
You can change the default key size in the security policy at any time. Any hosts
configured after the change default to the changed key size.
You can set the key size in the certkeysize security policy through obtool or the
Oracle Secure Backup Web tool. Oracle Secure Backup uses the modified key size the
next time you configure a host. You can change the certkeysize value at any time,
but the change only applies to the next mkhost command.
To set the certkeysize security policy:
1. Log in to obtool as a user with the modify administrative domain's
configuration right.
2. Set the certkeysize policy to the desired default value. The following example
shows how to use obtool to set the key size to 3072 bits:
ob> cdp security
ob> setp certkeysize 3072
Setting the Key Size in mkhost
You can override the default key size for any individual host. Different hosts in the
domain can have different key sizes.
Note: There is no equivalent procedure for Windows. Windows
users are restricted to the default value.
See Also: Appendix B, "Oracle Secure Backup obparameters
Installation Parameters"
See Also: Oracle Secure Backup Administrator's Guide to learn how to
set a policy

Table of Contents

Questions and Answers:

Question and Answer IconNeed help?

Do you have a question about the Oracle Secure Backup and is the answer not in the manual?

Oracle Secure Backup Specifications

General IconGeneral
CompressionYes
Tape Library SupportYes
Web InterfaceYes
Command Line InterfaceYes
SchedulingYes
ReportingYes
Role-Based Access ControlYes
NDMP SupportYes
Virtual Tape Library SupportYes
Operating Systems SupportedLinux, Windows, Solaris, AIX, HP-UX
Backup MethodsFull, Incremental, Differential
Media SupportTape, Disk
Database SupportOracle Database
EncryptionAES 256-bit
Centralized ManagementYes
Cloud IntegrationOracle Cloud